macos-downloads-screenshots-hygiene
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
osascript(AppleScript) viasubprocess.runinscripts/trash_inventory.pyandscripts/restore_named_from_trash.pyto interact with the macOS Finder. This is a standard and necessary method for enumerating Trash contents on macOS, where direct shell access to~/.Trashis often restricted by System Integrity Protection (SIP). - [COMMAND_EXECUTION]:
scripts/rename_screenshots.swiftuses the native SwiftVisionframework for OCR. While it executes logic based on OCR results, it does so to propose and apply filenames for screenshots, which aligns with its stated purpose. - [DATA_EXPOSURE_&_EXFILTRATION]: The skill instructions in
SKILL.md(Step 4) explicitly advise the agent to flag sensitive files like keys, certs, and secrets as "hesitant" before deletion. This demonstrates a safety-conscious design intended to prevent accidental data loss of sensitive credentials. - [PRIVILEGE_ESCALATION]: The skill provides guidance on recovering Finder if it becomes unresponsive (Step 6) using
killall Finder. This is a routine troubleshooting step on macOS and does not constitute a privilege escalation attack.
Audit Metadata